com.hazelcast.nio.ssl

Interface TlsHostVerifier

public interface TlsHostVerifier

Interface for additional host validation in SSL/TLS connections. The implementing classes have to provide a public no-args constructor.

Method Summary

Modifier and Type	Method and Description
void	init(Properties properties) Inits the verifier instance after creation with properties.
void	verifyHost(InetAddress hostAddress, Certificate[] hostCertificates) Verifies the given host address and its list of Certificates are valid combination for this TlsHostVerifier implementation.

Method Detail

init

void init(Properties properties)

Inits the verifier instance after creation with properties.

Parameters:

properties - verifier properties (may be null)

verifyHost

void verifyHost(InetAddress hostAddress,
                Certificate[] hostCertificates)
         throws SSLPeerUnverifiedException

Verifies the given host address and its list of Certificates are valid combination for this TlsHostVerifier implementation. If the verification fails, the SSLPeerUnverifiedException is thrown.

Parameters:

hostAddress - Peer address.

hostCertificates - Peer certificates. May be null if checking is enabled on the server side of TLS connection and a TLS client comes without authentication.

Throws:

SSLPeerUnverifiedException - if the host was not verified.